What do I need for implementing Windows Hello for Business in my organization?
I am starting off with Managed Active Directory from a service provider, with a DNS domain. My laptop is listed as AD Joined in our Azure AD. It is not managed this way currently (we don't have anything set up to manage these devices).
What do I need to get Windows Hello for Business enrollment for this laptop? Do I need to have inTune for it?
If I need inTune, then can I get a subscription that is inTune to work with this Managed AD or do I have to subscribe to other services as well? What subscriptions are available for this? Do I need a certificate authority to be set up too?
End goal, for MFA to be used with all accounts on my local laptop.